CVE-2006-3458

CVE Database · CVE-2006-3458

CVE-2006-3458

· N/AModified

CVSS v3.1

N/A

EPSS

0.42%

Published

Jul 7, 2006

Modified

Apr 15, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.

Affected Products (21)

zope · zopevulnerable

zope · zope

References (20)

http://mail.zope.org/pipermail/zope-announce/2006-July/001984.html

http://secunia.com/advisories/20988

Vendor Advisory

http://secunia.com/advisories/21025

Vendor Advisory

http://secunia.com/advisories/21130

Vendor Advisory

http://secunia.com/advisories/21459

Vendor Advisory

http://www.debian.org/security/2006/dsa-1113

http://www.novell.com/linux/security/advisories/2006_19_sr.html

http://www.securityfocus.com/bid/18856

http://www.vupen.com/english/advisories/2006/2681

KEV Catalog EPSS Scores Vendors All CVEs